Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
File:                     MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft (raw, json)
Hash identifier:          sUDYImz+KrjuLiTxHnedJEgGoKwV6fDlttZgMWHaR0g=
Subject key identifier:   E4:3D:FB:0D:D9:D1:AC:58:A0:78:F6:C0:F6:E5:A6:B7:BD:05:19:4A
Authority key identifier: 30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
Certificate issuer:       /CN=307a4415bad40b643e10bec4d282cd3072ba56da
Certificate serial:       0198D472DB86FAEB2E1E6C1054C74B49F845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 01:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:33 +0000
Files and hashes:         1: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl (hash: wTkk14RdKnh3+MqULNPabrphC/XHP0gA8vCbIiJJb1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:db:86:fa:eb:2e:1e:6c:10:54:c7:4b:49:f8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307a4415bad40b643e10bec4d282cd3072ba56da
        Validity
            Not Before: Aug 23 01:02:33 2025 GMT
            Not After : Aug 24 01:02:33 2025 GMT
        Subject: CN=e43dfb0dd9d1ac58a078f6c0f6e5a6b7bd05194a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:4c:22:0f:9e:e3:34:e9:4e:6e:5a:58:6a:
                    2f:4c:e0:46:8e:d9:f7:5b:e6:65:bb:40:c5:e6:52:
                    6d:34:2e:7d:fb:ba:2c:47:b3:9e:b3:8b:04:0c:a4:
                    69:79:e0:70:df:3a:0f:22:12:80:e0:63:f6:b3:14:
                    7c:bc:41:7f:25:b3:1a:e7:8d:81:7e:d2:b5:b6:87:
                    79:83:b0:91:4e:49:7f:4a:89:e5:7e:9a:4c:d2:5a:
                    68:a0:a7:05:94:6e:91:97:c9:b7:07:ac:fc:d1:ed:
                    9e:ca:ab:ff:5c:24:a5:33:44:03:1d:6c:ec:25:98:
                    1c:bf:45:df:82:89:fa:82:e1:7b:5e:70:bf:89:67:
                    52:bf:18:75:21:ae:4b:9c:ba:e6:a6:88:f3:8a:d0:
                    17:6e:2a:94:47:d6:f7:b7:d5:b5:42:47:9e:2c:b4:
                    76:36:69:a3:ff:26:84:58:46:63:29:12:80:ec:9a:
                    74:58:c2:d1:d2:9f:74:68:ac:41:a9:10:e4:33:34:
                    a2:e8:12:44:cb:7e:03:c8:5e:56:99:62:ea:b3:6e:
                    2d:a2:69:50:7a:e8:9d:15:18:4c:b1:de:64:bc:ad:
                    11:46:ae:88:2c:80:d6:c2:f3:e9:f6:97:d4:be:cb:
                    c2:f1:29:8f:dc:7a:31:0b:f1:7d:50:ce:93:19:50:
                    36:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3D:FB:0D:D9:D1:AC:58:A0:78:F6:C0:F6:E5:A6:B7:BD:05:19:4A
            X509v3 Authority Key Identifier:
                keyid:30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:15:87:bd:de:26:e2:97:ac:05:94:7f:e7:72:25:10:f6:fe:
         fa:0e:8d:62:8a:76:b2:2e:0b:84:9c:f4:a6:d6:a1:6c:fb:15:
         4e:49:83:72:a4:61:d2:3b:34:de:2c:3d:45:c6:ad:90:ff:9e:
         41:ff:15:c4:50:cf:0b:3d:f7:ef:78:0a:4f:f8:a5:3e:29:9a:
         93:ca:b9:20:1d:59:64:95:5d:c4:49:b0:b8:fd:29:0b:a9:f0:
         46:00:b7:d4:b6:40:5f:92:01:6b:18:7b:09:b7:a8:59:ca:96:
         c7:98:bd:1b:85:38:4e:60:f2:bb:c7:d7:da:80:25:e4:d7:00:
         9e:3f:56:44:8c:c6:7f:17:15:72:ca:46:56:19:43:d0:c5:f2:
         6d:53:a4:54:72:74:5b:fa:d1:f4:66:49:a6:5b:4a:e3:44:be:
         2f:06:ef:1c:65:14:e6:4d:4c:0c:17:33:a1:60:dc:53:e8:32:
         90:2a:cb:c2:1a:a9:7b:ef:99:d6:27:b1:76:cb:e8:5d:c1:13:
         7f:9b:fe:b0:99:63:1d:f8:46:93:16:8c:ae:4f:59:b4:cc:04:
         7d:d6:df:dc:f7:84:f4:04:b7:c7:37:48:bf:fb:5a:e8:b0:39:
         cc:c1:00:72:77:21:53:40:c9:b7:d5:36:cd:da:d8:60:cb:8a:
         5a:1e:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:56 2025 by rpki-client